Microsoft Certified: Azure Administrator Associate
Azure Administrator is the certificate most Azure job adverts actually name. It covers identity, storage, compute, networking and monitoring: the work of keeping an environment running rather than designing a new one.
A hundred minutes, no prerequisite exam, and a validity period that catches people out.
Exam facts
- Exam code
- AZ-104
- Level
- Associate
- Field
- Cloud
- Duration
- 100 minutes
- Questions
- about 40 to 60, including case studies and drag-and-drop items; hands-on labs possible
- Passing score
- 700 of 1,000 (scaled)
- Languages
- English, German, French, Spanish, Italian, Portuguese, Japanese, Korean, ChineseThe badges group regional variants: Chinese (Simplified and Traditional) count as one language here, so the vendor lists ten exam editions where this page shows nine.
- Price
- 165 USD (read 8 September 2026)
- Validity
- 1 year, renewable
- Exam delivery
- Pearson VUE (test centre or online proctored); students through Certiport
Prerequisites: No required certification. Microsoft expects hands-on experience with operating systems, networking, servers and virtualisation, and familiarity with PowerShell, the Azure CLI, the Azure portal, ARM templates or Bicep, and Microsoft Entra ID.
Renewal: Free yearly renewal through an online assessment on Microsoft Learn, available from six months before the certificate expires
Source: exam page at Microsoft · Price: Priced by the country where the exam is proctored: 165 USD in the United States, 126 EUR in Germany and Austria (Microsoft Learn country selector, read 2026-09-08)
How to prepare
1. The vendor's free learning path
Microsoft publishes the exam objectives and a learning path free of charge — the authoritative source for scope and weighting. Open the learning path (opens in a new tab)
2. Online courses
Courses and practice questions from the directory that target exactly this exam — details, price and the provider link (affiliate) are on the course page.
- Preparation courseAZ-104: Microsoft Azure Administrator - Full Course
- Preparation courseAZ-103 / AZ-104 Microsoft Azure Administrator - UPDATED 2025
- Practice testsAZ-104 Microsoft Azure Administrator Practice Exam Questions
- Practice testsAZ-104 Real Azure Administrator Practice Test
- Preparation courseAzure Administrator: AZ-103/AZ-104
3. A practice test in the exam format
MeasureUp sells a practice test for AZ-104 with questions in the exam format, an explanation for every answer and a timed mode; the price shows in your currency on the shop page. Affiliate link.
Practice test for AZ-104 at MeasureUp (opens in a new tab)Book the exam
Delivered by Pearson VUE (test centre or online proctored); students through Certiport. Schedule with Microsoft (opens in a new tab)
Affiliate disclosure: the course and practice-test links above are affiliate links — buying through them may earn us a commission at no extra cost to you. The vendor's learning path and booking links carry no commission.
The exam is unusually operational for a multiple-choice paper. Questions describe a tenant that already exists and something that has gone wrong or needs changing: a role assignment that grants too much, a storage account whose replication no longer suits the recovery requirement, a virtual network that cannot reach a peer. The right answer is frequently the smallest change that fixes it, which rewards administrators and frustrates people who prepared by reading about features in isolation.
Case-study style items appear, and so occasionally do hands-on labs, which extend the sitting. Microsoft does not publish a fixed question count for role-based exams, so the honest expectation is a range rather than a number, and the scaled score of 700 is not a percentage however much it looks like one.
Twelve months, then an annual chore
- It expires after a year, which is shorter than almost anything else on this site and shorter than most people assume when they book it.
- Renewal is free through an unproctored assessment on Microsoft Learn, taken at your desk with no appointment.
- The window opens six months before expiry and not earlier, so it cannot be dealt with the moment you think of it.
- Letting it lapse is expensive, because the free route shuts, leaving a full-price proctored sitting as the sole way back.
- Each certificate you hold repeats this, which is the practical argument for holding two or three rather than collecting them.
| Aspect | Azure Administrator (AZ-104) | AWS Solutions Architect Associate (SAA-C03) |
|---|---|---|
| Time | 100 minutes, 120 with labs | 130 minutes |
| Questions | About 40 to 60 | 65, of which 15 unscored |
| Pass mark | 700 of 1,000 | 720 of 1,000 |
| Validity | Twelve months | Three years |
| Renewal | Free online assessment | Half-price resit, or a higher exam |
| German edition | Yes | No |
| Leans toward | Running what exists | Designing what does not yet |
The two are the certificates most often weighed against each other by people choosing a first cloud, and the table shows they are not the same kind of exam. This one asks you to operate; that one asks you to design. Over a decade the renewal columns matter more than the sitting fees: twelve free assessments against three or four paid resits, provided you never miss a window. Let your employer's platform decide, and if nobody has picked a platform for you, notice that only one of the two is available in German.
What Microsoft assumes you already do
Nothing gates entry, and the expectations list is long: hands-on experience with operating systems, networking, servers and virtualisation, plus familiarity with PowerShell, the Azure command line, the portal, ARM templates or Bicep, and Microsoft Entra ID. That is a description of a working administrator, and the questions are written for one. The identity items are where on-premise experience turns from asset to trap, because Entra is not a domain controller with a new name and the exam knows exactly which instincts to test. Pearson VUE delivers it in nine editions, German included, at a price that follows the country of sitting.
Put the renewal date in the calendar before you sit the exam
The free assessment opens six months before expiry and closes on the day the certificate lapses. Candidates lose this certificate by forgetting, not by failing: the assessment is brief and open-book. Set two reminders, one when the window opens and one a month before it shuts, and the twelve-month term stops being the disadvantage it looks like.
What a question looks like
Written by us in the exam's style. It is not a real question from any question bank, and we do not publish those.
A storage account holds audit records that must survive the loss of an entire region and must remain readable during such an outage. The team currently uses geo-redundant storage and reports that the data is unavailable while a regional failure is in progress. What should be changed?
The current configuration already replicates across regions, so candidates who match on the words redundancy and region conclude that nothing is wrong. The requirement hiding in the stem is read access during the outage, which is a different replication option with a very similar name. Microsoft builds a great many questions on pairs of options that differ by one capability.
What it costs to get and to keep
| Item | Amount | Note |
|---|---|---|
| Exam fee | 165 USD | priced by the country where the exam is proctored, so this is the United States figure rather than a worldwide price (read 12 September 2026) |
| Exam fee, Germany and Austria | 126 EUR | from the Microsoft Learn country selector (read 8 September 2026) |
| Annual renewal | not published | free, through an unproctored online assessment available only in the six months before expiry (read 12 September 2026) |
| Renewal after lapsing | 165 USD | the full proctored exam again; missing the window is the expensive mistake this certificate invites (read 12 September 2026) |
How much preparation, from where you are
- You administer Azure at work already
- Shorter than the syllabus implies. Focus on the corners your organisation does not use, which are usually backup and recovery options, and on governance, which tends to belong to somebody else until an exam asks.
- You administer Windows Server or VMware on-premise
- The strongest starting point outside Azure itself. Identity is the genuine shift: Entra is not a domain controller in the cloud, and questions repeatedly test that difference.
- You passed the fundamentals paper and nothing else
- A real jump rather than the next rung. Fundamentals describes; this one troubleshoots. Get a trial subscription and break things in it before booking.
What passing this does not prove
- Whether you can design an environment from nothing, which is the architect exam's job.
- Infrastructure as code. The questions live in the portal even when real work does not.
- Cost management under pressure, only the tools that report it.
- Anything about running Azure at the scale where its interesting failures start.
Against the alternatives
- SAA-C03 — AWS Certified Solutions Architect – Associate
- Roughly the AWS analogue in hiring weight, albeit tilted toward design while this tilts toward operations. It runs three years to this one's twelve months, which is the difference people notice later.
- AZ-305 — Microsoft Certified: Azure Solutions Architect Expert
- The architect certificate directly above, and it requires this one. Holding both means two annual renewals rather than one, which is worth knowing before you start the climb.
- AZ-900 — Microsoft Certified: Azure Fundamentals
- Optional and not a prerequisite. Skip it if you are technical; the fundamentals paper adds nothing an employer will read once you hold this.
AZ-104 — quick answers
Is there really an annual renewal?
Yes, and it is the most-missed fact about Microsoft's role-based certificates. The renewal itself is free and takes an unproctored assessment on Microsoft Learn, but it only opens in the final six months, and a lapsed certificate can be recovered only by sitting the full exam again.
Do I need AZ-900 first?
No. There is no prerequisite between the tiers and most technical candidates go straight here. The fundamentals paper is aimed at people who describe Azure rather than administer it.
How many questions will I get?
Microsoft does not publish a count for role-based exams, so expect a range. Some sittings include case studies or hands-on labs, and a lab extends the time allowed rather than replacing questions.
Is on-premise experience worth anything here?
A great deal, with one caveat. Storage, networking and virtualisation concepts carry over almost intact. Identity does not: treating Entra as Active Directory with a fresh label is the surest way to shed marks.
What does the architect certificate above this add?
A prerequisite, for one thing: AZ-305 cannot be claimed without holding this certificate current. It also changes the question from what to fix to what to build, across case studies several screens long. Sit this, run a tenant for a year, then decide whether design is the direction.
What comes next
- Microsoft · AZ-900Microsoft Certified: Azure Fundamentals
- Microsoft · AZ-305Microsoft Certified: Azure Solutions Architect Expert
- Microsoft · AZ-400Microsoft Certified: DevOps Engineer Expert
- AWS · SAA-C03AWS Certified Solutions Architect – Associate
- Google Cloud · ACEGoogle Cloud Associate Cloud Engineer
- CompTIA · CV0-004CompTIA Cloud+
Concepts this exam draws on
Glossary entries with the reason each one matters for AZ-104.
- Cloud Hosting
Deploying and managing Azure compute is the administrator's core domain.
- IaaS
Virtual machines, disks and virtual networks are most of AZ-104.
- Load Balancing
Azure Load Balancer and Application Gateway configuration questions.
- DNS
Azure DNS zones and name resolution inside virtual networks.
- Subnetting
Virtual networks are carved into subnets, and the exam asks which address range fits where.
- Routing
User-defined route tables and the default system routes decide where a virtual machine's traffic goes.
- Firewall
Network security groups are the platform's stateful filter, and the exam has you write and order their rules.
- IAM
Role assignments at subscription, resource group and resource scope are a whole skill area.
- VPN
Site-to-site and point-to-site gateways are how the exam connects an office to a virtual network.
Last reviewed 12 September 2026 · Getting Digital
